Sept. 16, 2025

This piece is sponsored by Augustana University.

Augustana University’s third annual Critical Inquiry & Citizenship Colloquium will culminate with Dr. Joy Buolamwini as the featured speaker.

Buolamwini, bestselling author, MIT researcher and founder of the Algorithmic Justice League, will give a keynote presentation to the Augustana community, alumni and friends at 4 p.m. Oct. 25 in the Elmen Center, with a book signing to follow.

Generously supported by Rosemarie and Dean Buntrock and in partnership with Augustana’s Center for Western Studies, the Critical Inquiry & Citizenship Colloquium was established in 2023. The colloquium is designed to promote civil discourse and deep reflection with the goal of enhancing students’ skills to think critically and communicate persuasively as citizens of a pluralistic society.

“In an era of unprecedented technological advancement, Dr. Buolamwini’s insights urge us to consider not only the capabilities of artificial intelligence but its ethical implications. Her participation in this year’s colloquium invites meaningful dialogue around integrity, responsibility and the human experience,” Augustana President Stephanie Herseth Sandlin said.

In addition to being a researcher, model and artist, Buolamwini is the author of the U.S. bestseller “Unmasking AI: My Mission To Protect What Is Human in a World of Machines.”

Buolamwini’s research on facial recognition technologies transformed the field of AI auditing. She advises world leaders on preventing AI harm and lends her expertise to congressional hearings and government agencies seeking to enact equitable and accountable AI policy.

Buolamwini’s TEDx Talk on algorithmic bias has almost 1.9 million views, and her TED AI Talk on protecting human rights in an age of AI transforms the boundaries of TED Talks.

As the “Poet of Code,” she also creates art to illuminate the impact of AI on society, with her work featured in publications such as Time, The New York Times, Harvard Business Review, Rolling Stone and The Atlantic. Her work as a spokesmodel also has been featured in Vogue, Allure, Harper’s Bazaar and People. She is the protagonist of the Emmy-nominated documentary “Coded Bias.”

Buolamwini is the recipient of notable awards, including the Rhodes Scholarship, Fulbright Fellowship, Morals & Machines Prize, as well as the Technological Innovation Award from the King Center. She was selected as a 2022 Young Global Leader, one of the world’s most promising leaders younger than 40 as determined by The World Economic Forum, and Fortune named her the “conscience of the AI revolution.”

“Many associate AI with advancement and intrigue. Dr. Buolamwini invites cognitive dissonance by demonstrating the potentials for harm caused by the unexamined use of AI,” said Dr. Shannon Proksch, assistant professor of psychology and neuroscience at Augustana.

“Dr. Buolamwini’s visit will invite the Augustana community to engage in critical thinking and deep reflection around how algorithmic technology intersects with our lives and society as a whole. Her work embodies the goals of the Critical Inquiry & Citizenship Colloquium by challenging us to acknowledge the human impact of AI and remain vigilant about the role that we play in ensuring that these technologies do more to benefit and strengthen our communities than to harm them.”

“AI is the most powerful and disruptive technology of our time, so we’re very excited to bring Dr. Buolamwini to Sioux Falls. She’s an engaging and dynamic speaker whose research and life experience have given her deep insight into how we can ensure that AI is used to promote the flourishing of all,” said Dr. Stephen Minister, Stanley L. Olsen Chair of Moral Values and professor of philosophy at Augustana.

Tickets for the 2025 Critical Inquiry & Citizenship Colloquium are free and available to the public at augie.edu/CICCTickets.

About the Critical Inquiry & Citizenship Colloquium

In partnership with the Center for Western Studies and supported by Rosemarie and Dean Buntrock, this annual one- or two-day colloquium is intended to feature faculty scholars and students, as well as industry, research and policy experts who inspire and facilitate critical thinking, persuasive reasoning and thoughtful discussion around timely and engaging topics in areas ranging from religion, science and politics to history, technology and business. The colloquium kicks off or culminates in a keynote given by thought leaders of national or global prominence.

Story Continues

Villager can be weaponized for attacks

According to Straiker, Villager integrates AI agents to perform tasks that typically require human intervention, including vulnerability scanning, reconnaissance, and exploitation. Its AI can generate custom payloads and dynamically adapt attack sequences based on the target environment, effectively reducing dwell time and increasing success rates.

The framework also includes a modular orchestration system that allows attackers, or red teamers, to chain multiple exploits automatically, simulating sophisticated attacks with minimal manual oversight.

Villager’s dual-use nature is the crux of the concern. While it can be used by ethical hackers for legitimate testing, the same automation and AI-native orchestration make it a powerful weapon for malicious actors. Randolph Barr, chief information security officer at Cequence Security, explained, “What makes Villager and similar AI-driven tools like HexStrike so concerning is how they compress that entire process into something fast, automated, and dangerously easy to operationalize.”

Straiker traced Cyberspike to a Chinese AI and software development company operating since November 2023. A quick lookup on a Chinese LinkedIn-like website, however, revealed no information about the company. “The complete absence of any legitimate business traces for ‘Changchun Anshanyuan Technology Co., Ltd,’ along with no website available, raises some concerns about who is behind running ‘Red Team Operations’ with an automated tool,” Straiker noted in the blog.

Supply chain and detection risks

Villager’s presence on a trusted public repository like PyPI, where it was downloaded over 10,000 times over the last two months, introduces a new vector for supply chain compromise. Jason Soroko, senior fellow at Sectigo, advised that organizations “focus first on package provenance by mirroring PyPI, enforcing allow lists for pip, and blocking direct package installs from build and user endpoints.“